Upgrade grpcio to 1.60.0 to fix CVE-2023-1428 (#174)

* Upgrade grpcio to 1.60.0 to fix CVE-2023-1428
* Add a workflow to verify functions installation

Author: BewareMyPower

.github/workflows/ci-pr-validation.yaml

@@ -87,6 +87,10 @@ jobs:
       - name: Stop Pulsar service
         run: ./build-support/pulsar-test-service-stop.sh
 
+      - name: Test functions install
+        run: |
+            WHEEL=$(find dist -name '*.whl')
+            pip3 install ${WHEEL}[functions] --force-reinstall
 
   linux-wheel:
     name: Wheel ${{matrix.image.name}} - Py ${{matrix.python.version}} - ${{matrix.cpu.platform}}

setup.py

@@ -80,7 +80,7 @@ def build_extension(self, ext):
 extras_require["functions"] = sorted(
     {
       "protobuf>=3.6.1,<=3.20.3",
-      "grpcio>=1.8.2",
+      "grpcio>=1.60.0",
       "apache-bookkeeper-client>=4.16.1",
       "prometheus_client",
       "ratelimit"